Listing of Claims: 

1-16 (withdrawn). 

1 7 (original). A method characterized by the step of: 

a) on a user interface of a terminal device generating a display of privilege state 
data in an array of cells in a three-dimensional view on a terminal device, the 
privilege state data of the cells displayed in correspondence with privilege 
labels, object labels, and user labels arranged along respective transverse axes 
of the three-dimensional view. 



18 (original). A method as claimed in claim 17 wherein the privilege labels correspond to 
respective privilege data, the object labels correspond to respective object data, and the user 
data correspond to respective user data, further characterized by the steps of: 

b) with the user interface of the terminal device, inputting privilege state data 
into at least one cell of the array using at least one privilege label, object label, 
and user label; 

c) determining the privilege data, object data, and user data corresponding to the 
cell in which the privilege state data is input in the step (b); 

d) storing the privilege state data in a memory in correspondence with respective 
privilege data, object data, and user data determined in step (c) for the cell in 
which the privilege state data was input in the step (b); and 

e) updating the display to include a privilege state symbol corresponding to the 
privilege state data input by the user in the step (b), based on the privilege 

..... state data stored in the memory in the step (d). 

19 (original). A method as claimed in claim 17 wherein the privilege state data includes data 
for "on", "inherited on", "public on", "off 1 , "not set", and "disabled" states. 

20 (original). A method as claimed in claim 19 wherein the privilege state data toggles 
between the "on", "inherited on", "public on", "off, "not set", and "disabled" states with 
successive activations of an input device of the user interface. 
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21 (original). A method as claimed in claim 18 further characterized by the steps of: 

f) with the user interface of the terminal device, selecting at least one of the 
privilege labels, object labels, or user labels; and 

g) modifying the display of the privilege state data by removing or adding cells 
to the three-dimensional view, based on the step (f). 

22 (original). A method as claimed in claim 18 wherein the user data identifies first and 
second user entities related by predetermined hierarchical relationship data and the privilege 
state data is input in the step (b) in at least one cell corresponding to first user entity, the 
method further characterized by the steps of: 

f) determining whether the second user entity inherits privilege state data from 
the first user entity, based on the hierarchical relationship data; and 

g) if the determination in the step (f) establishes that the second user entity 
inherits the privilege state data from the first user entity, storing the privilege 
state data input in the step (b) in correspondence with the user data for the 
second entity and the object data and privilege data for which the privilege 
state data was input in the step (b). 

23 (original). A method as claimed in claim 1 8 wherein the user data identifies dependencies 
between first and second object data related by predetermined dependency data, the method 
further characterized by the steps of: 

f) determining whether the second object data inherits privilege state data from 
the from the first object data, based on the predetermined dependency data; 
and 

g) if the determination in the step (f) establishes that the second object data 
inherits privilege state data from the first object data, storing the privilege state 
data input in the step (b) in correspondence with the user data for the second 
entity and the object data and privilege data for which the privilege state data 
was input in the step (b). 
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24 (original). A method as claimed in claim 18 wherein the user data identifies dependencies 
between first and second privilege data related by predetermined dependency data, the 
method further characterized by the steps of: 

f) determining whether the second privilege data inherits privilege state data 
from the from the first privilege data, based on the predetermined dependency 

) data; and 

g) if the determination in the step (f) establishes that the second privilege data 
inherits privilege state data from the first privilege data, storing the privilege 
state data input in the step (b) in correspondence with the user data for the 
second entity and the object data and privilege data for which the privilege 
state data was input in the step (b). 

25-27 (withdrawn). 
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